Implemented Pundit and todo policy
Merge pull request #12 from thadley/todo-policy

Implemented Pundit and todo policy